fix: delete keys and seed only active ones

Ensure admin key deletion removes the DB record and returns a
"deleted" status. Update seeder idempotency to count only active keys
when deciding whether to skip or create new keys.

internal/api/admin_handler.go

@@ -516,8 +516,8 @@ func (h *AdminHandler) ListKeysForMaster(c *gin.Context) {
 }
 
 // DeleteKeyForMaster godoc
-// @Summary      Delete (revoke) child key
-// @Description  Suspends a child key under the specified master
+// @Summary      Delete child key
+// @Description  Revokes and removes a child key under the specified master
 // @Tags         admin
 // @Produce      json
 // @Security     AdminAuth
@@ -561,5 +561,10 @@ func (h *AdminHandler) DeleteKeyForMaster(c *gin.Context) {
 		return
 	}
 
-	c.JSON(http.StatusOK, gin.H{"status": "revoked"})
+	if err := h.db.Delete(&k).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to delete token", "details": err.Error()})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"status": "deleted"})
 }